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WHAT IS CLAIMED IS: 

1. A method of establishing a path for distributing data through a network, 
comprising: 

establishing a first data distribution path through the network, the network comprising at 
least one switch and one link; 

determining whether eavesdropping has occurred on the first data distribution path using 
quantum cryptography; and 

establishing a second data distribution path through the network based on the 
eavesdropping determination. 

2. The method of claim 1, wherein the network comprises an optical network. 

3. The method of claim 1, wherein the at least one switch comprises at least one 
optical switch. 

4. The method of claim 1, wherein the at least one link comprises at least one optical 

link. 

5. The method of claim 1, wherein the first data distribution path comprises a 
plurality of links and switches. 



21 



EXPRESS MAIL NO. EK555899057US PATENT 

Attorney Docket No. 01-4015 

6. The method of claim 5, wherein the second data distribution path comprises a 
plurality of links and switches. 

7. The method of claim 6, wherein the first data distribution path and the second 
data distribution path comprise no common links and switches. 

8. The method of claim 6, wherein the first data distribution path and the second 
data distribution path comprise a subset of common links and switches. 

9. The method of claim 1, wherein the first data distribution path comprises a first 
encryption key distribution path. 

10. The method of claim 1 , wherein the second data distribution path comprises a 
second encryption key distribution path. 

1 1 . The method of claim 9, further comprising: 

distributing a first encryption key via the first encryption key distribution path. 

12. The method of claim 10, further comprising: 

distributing a second encryption key via the second encryption key distribution path. 



22 



EXPRESS MAIL NO. EK555899057US PATENT 

Attorney Docket No. 01-4015 

13. A computer-readable medium containing instructions for controlling at least one 
processor to perform a method of establishing a path for distributing data through a network, the 
method comprising: 

initiating establishment of a first data distribution path through the network, the network 
comprising at least one switch and one link; 

determining whether eavesdropping has occurred on the first data distribution path using 
quantum cryptography; and 

initiating establishment of a second data distribution path through the network based on 
the eavesdropping determination. 

14. A system for establishing a path for distributing data through a network, 
comprising: 

means for establishing a first data distribution path through the network, the network 
comprising at least one switch and one link; 

means for determining whether eavesdropping has occurred on the first data distribution 
path using quantum cryptography; and 

means for establishing a second data distribution path through the network based on the 
eavesdropping determination. 

15. A system for establishing a path for distributing data through a network, 
comprising: 
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a switch configured to establish a first encryption key distribution path through the 

network, the first encryption key distribution path comprising a plurality of switches and links; 

and 

a data distribution endpoint configured to determine whether eavesdropping has occurred 
on the first encryption key distribution path using quantum cryptography, 

wherein the switch is further configured to establish a second encryption key distribution 
path through the network responsive to the eavesdropping determination, the second encryption 
key distribution path comprising a plurality of switches and links. 

16. A method of constructing a path through a multi-node communications network, 
comprising: 

requesting a path through the network, the request comprising identifiers of at least one 
of a link and a node in the network; and 

setting up the path through the network, the path excluding the at least one of the link and 
the node in the network. 

17. The method of claim 16, wherein setting up the path through the network 
comprises: 

constructing a first graph of a topology of the network. 
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18. The method of claim 17, wherein setting up the path through the network further 
comprises: 

constructing a second graph of a topology of the network by omitting the at least one of a 
link and node in the network from the first graph. 

19. The method of claim 18, wherein setting up the path through the network further 
comprises: 

determining a shortest path through the second graph. 

20. The method of claim 16, wherein the multi-node communications network 



comprises optical switches. 



21. 



The method of claim 20, wherein the optical switches are interconnected via links. 



22. 



The method of claim 21, wherein the links comprise one or more optical fibers. 



23. 



The method of claim 16, wherein the multi-node communications network 



comprises an optical network. 
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24. A computer-readable medium containing instructions for controlling at least one 
processor to perform a method of constructing a path through a multi-node communications 
network, the method comprising: 

receiving a request to set-up a path through the network, the request comprising 
identifiers of at least one of a link and a node in the network; and 

setting up the path through the network, the path excluding the at least one of the link and 
the node in the network. 

25. A system for constructing a path through a multi-node communications network, 
comprising: 

means for requesting a path through the network, the request comprising identifiers of at 
least one of a link and a node in the network; and 

means for setting up the path through the network, the path excluding the at least one of 
the link and the node in the network. 

26. A system for constructing a path through a multi-node communications network, 
comprising: 

a data distribution endpoint configured to request a path through the network, the request 
comprising identifiers of at least one of a link and a node in the network; and 

an optical switch configured to set up the path through the network, the path excluding 
the at least one of the link and the node in the network. 
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27. A method of locating an eavesdropper in an optical network, comprising: 
transmitting photons across a first path in the optical network, the first path comprising a 

plurality of links and nodes; and 

identifying a location of an eavesdropper of the transmitted photons by successively 
omitting each link and node from the first path and determining an occurrence of eavesdropping 
at each omission using quantum cryptography. 

28. The method of claim 27, further comprising: 

/ 

notifying a management entity of the optical network of the location of the eavesdropper. 

29. The method of claim 27, wherein the nodes comprise optical switches. 

30. A computer-readable medium containing instructions for controlling at least one 
processor to perform a method locating an eavesdropper eavesdropping photons transmitted in an 
optical network, the method comprising: 

transmitting photons across a first path in the optical network, the first path comprising a 
plurality of links and nodes; and 

identifying a location of an eavesdropper of the transmitted photons by successively 
omitting each link and node from the first path and determining an occurrence of eavesdropping 
at each omission using quantum cryptography. 
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31. An optical system, comprising: 
an optical switch configured to: 

forward photons across a first path in the optical network, the first path 
comprising a plurality of links and nodes, and 

successively omit each link and node from the first path; and 
a distribution endpoint configured to: 

identify a location of an eavesdropper of the forwarded photons by determining an 
occurrence of eavesdropping at each omission of each link and node from the first path 
using quantum cryptography. 



32. A system for locating an eavesdropper eavesdropping photons transmitted in an 
optical network, comprising: 

means for transmitting photons across a first path in the optical network, the first 
path comprising a plurality of links and nodes; and 

means for identifying a location of an eavesdropper of the transmitted photons by 
successively omitting each link and node from the first path and determining an occurrence of 
eavesdropping at each omission using quantum cryptography. 

33. A method of routing around eavesdroppers in a network, comprising: 
establishing a first path in the network; 

transmitting data symbols over the first path; 
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identifying eavesdropping on the first path using quantum cryptography; 

establishing a second path in the network responsive to the eavesdropping identification; 

and 

transmitting data symbols over the second path. 

34. The method of claim 33, wherein the network comprises an optical network. 

35. The method of claim 33, wherein the at least one switch comprises at least one 
optical switch. 

36. The method of claim 33, wherein the at least one link comprises at least one 
optical link. 

37. The method of claim 33, wherein the first path comprises a plurality of links and 
switches. 

38. The method of claim 37, wherein the second path comprises a plurality of links 
and switches. 

39. The method of claim 38, wherein the first path and the second path comprise no 
common links and switches. 
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40. The method of claim 38, wherein the first path and the second path comprise a 
subset of common links and switches. 

41. The method of claim 33, wherein the data symbols comprise at least a portion of 
an encryption key. 

42. The method of claim 33, wherein the data symbols comprise polarized photons. 

43. A quantum encryption key distribution device, comprising: 
a transceiver; and 

a processing unit configured to: 

establish a first key distribution path in the network, the first key distribution path 
comprising a plurality of links and switches, 

transmit at least a portion of a first encryption key over the first key distribution 
path via the transceiver, 

identify eavesdropping on the first key distribution path using quantum 
cryptographic techniques, 

establish a second key distribution path in the network responsive to the 
eavesdropping identification, the second key distribution path comprising a plurality of 
links and switches, and 
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transmit at least a portion of a second encryption key over the second key 

distribution path via the transceiver. 

44. A system for routing around eavesdroppers in a network, comprising: 
means for establishing a first path in the network; 

means for transmitting data symbols over the first path; 

means for identifying eavesdropping on the first path using quantum cryptography; 
means for establishing a second path in the network responsive to the eavesdropping 
identification; and 

means for transmitting data symbols over the second path. 

45. A method of establishing a path for distributing encryption key material through 
an optical network, the optical network comprising links interconnecting optical switches, the 
method comprising: 

establishing a first key distribution path through a first series of links and optical switches 
of the optical network. 

46. The method of claim 45, wherein the first series of links and optical switches 
comprises a plurality of links and a plurality of optical switches. 

47. The method of claim 45, further comprising: 

distributing encryption key material via the first key distribution path. 



31 



EXPRESS MAIL NO. EK555899057US 



PATENT 

Attorney Docket No. 01-4015 



48. The method of claim 45, further comprising: 

determining whether eavesdropping has occurred on the first key distribution path using 
quantum cryptography. 

49. The method of claim 48, further comprising: 

establishing a second key distribution path through a second series of links and optical 
switches of the optical network. 

50. The method of claim 49, wherein the first series of links and optical switches and 
the second series of links and optical switches comprise no common links and optical switches. 

51. The method of claim 49, wherein the first series of links and optical switches and 
the second series of links and optical switches comprise a subset of common links and optical 
switches. 

52. A computer-readable medium containing instructions for controlling at least one 
processor to perform a method for establishing a path for distributing encryption key material 
through an optical network, the optical network comprising links interconnecting optical 
switches, the method comprising: 
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establishing a key distribution path through a series of links and optical switches of the 

optical network. 

53. An optical network, comprising: 
a plurality of optical switches interconnected by links; and 
means for establishing a key distribution path through a series of optical switches 
comprising a subset of the plurality of optical switches. 
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